From 825759177827dc9c57dc4dbc0ede8848eaa72b64 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 2 Sep 2005 00:21:32 +0000
Subject: Add some stuff

git-svn-id: svn+ssh://asteria.noreply.org/svn/weaselutils/trunk@2 bc3d92e2-beff-0310-a7cd-cc87d7ac0ede
---
 make-bindconfig-from-ldap | 132 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 132 insertions(+)
 create mode 100755 make-bindconfig-from-ldap

(limited to 'make-bindconfig-from-ldap')

diff --git a/make-bindconfig-from-ldap b/make-bindconfig-from-ldap
new file mode 100755
index 0000000..92939b0
--- /dev/null
+++ b/make-bindconfig-from-ldap
@@ -0,0 +1,132 @@
+#!/usr/bin/perl -wT
+
+# Copyright 2002, 2003, 2004, 2005 Peter Palfrader <peter@palfrader.org>
+# All rights reserved.
+
+=pod
+
+=head1 NAME
+
+makezonefile - create config file for bind
+
+=head1 SYNOPSIS
+
+makezonefile
+
+=head1 DESCRIPTION
+
+makezonefile reads from STDIN a list of domains and
+their assoziated nameservers; one domain per line, the primary, the nameservers
+seperated by whitespace.
+
+Example:
+
+  sigint.net 82.94.251.194  asteria.debian.or.at. seppia.noreply.org.
+  theremailer.net 195.244.237.84|213.239.201.102  asteria.debian.or.at.
+  vanderheide.ca 64.26.156.90  asteria.debian.or.at.
+
+First column is the domain in question, second is the primary or primaries
+separated by a pipe symbol, the rest are the nameservers
+
+For each domain it will then look whether this host's name (as configured in
+the @THISNAMES variable) appears in the list of nameservers and if that is the
+case add a slave entry to the file hardcoded in the script.
+
+Afterwards a bind9 reload will be issued.
+
+
+The script is typicalle called from ssh (using authorized keys with command=script).
+
+=head1 OPTIONS
+
+none
+
+=head1 AUTHOR
+
+Peter Palfrader E<lt>peter@palfrader.org<gt>
+
+=head1 FILES
+
+/var/cache/bind/weasel/ldapzones.conf.slave.pushed
+
+=head1 REQUIREMENTS
+
+none but perl
+
+=head1 SEE ALSO
+
+Ask author.
+
+=cut
+	
+
+use strict;
+use English;
+
+$ENV{'PATH'} = '/bin:/usr/bin';
+delete @ENV{'IFS', 'CDPATH', 'ENV', 'BASH_ENV'};
+
+my $NAMEDCONF = '/etc/bind/named.conf.from-opium.ldapzones.slave.pushed';
+my @RELOAD = qw{/etc/init.d/bind9 reload};
+my @THISNAMES = qw{asteria.debian.or.at.};
+#my @THISNAMES = qw{seppia.noreply.org. ns3.noreply.org.};
+#my @THISNAMES = qw{redeemer.devspread.org.};
+
+my $date = localtime();
+open (CONF, ">$NAMEDCONF") or
+	die ("Cannot open $NAMEDCONF: $!\n");
+print CONF << "EOF";
+// conf file for bind
+// $date
+// automatically created by $PROGRAM_NAME from stdin (probably called by ssh)
+// vim:set syn=named:
+EOF
+
+my @lines = <>;
+DOMAIN:
+for my $line (@lines) {
+	chomp ($line);
+	my @part = split (/\s+/, $line);
+	my $domain = shift @part;
+	my @masters = split /\|/, shift @part;
+	unless (defined $domain && ($domain =~ /^[a-z0-9.-]+$/)) {
+		warn "Skipping $domain: bad name\n";
+		next;
+	};
+	if (scalar @masters == 0) {
+		warn "Skipping $domain: No masters\n";
+		next;
+	};
+	for my $master (@masters) {
+		unless (defined $master && ($master =~ /^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$/)) {
+			warn "Skipping $domain: bad master '$master'\n";
+			next DOMAIN;
+		};
+	};
+	my $this_ns = 0;
+	for my $ns (@part) {
+		for my $my_name (@THISNAMES) {
+			$this_ns |= ($ns eq $my_name);
+		};
+	};
+	next unless $this_ns;
+
+	print CONF << "EOF";
+	zone "$domain" {
+		type slave;
+		file "from-opium-slave-ldap-$domain";
+		allow-transfer { "none"; };
+		allow-query { any; };
+		masters {
+EOF
+	for my $master (@masters) {
+		print CONF "			$master;\n";
+	};
+	print CONF << "EOF";
+		};
+	};
+EOF
+};
+close (CONF);
+
+exec(@RELOAD);
-- 
cgit v1.2.3